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What is claimed is: 



1. A method for performing a modular multiplication on 
data processing means between a multiplicand and a 
multiplier consisting of a plurality of digits, using a 
modulus, the modular multiplication being part of a modular 
exponentiation within the framework of a cryptographic 
application, and the multiplicand, the multiplier and the 
modulus being variables of the cryptographic application, 
the method comprising: 

determining 1 multiplication shift values by means of a 
multiplication-lookahead method while taking into account 1 
blocks of consecutive digits of the multiplier, 1 being 
larger or smaller than 2; 

determining 1 reduction shift values by means of a 
reduction-lookahead method for the 1 blocks of digits of 
the multiplier; 

applying the 1 multiplication shift values and the 1 
reduction shift values to an intermediate result from a 
previous iteration step, to the modulus or to a value 
derived from the modulus, and to the multiplicand so as to 
obtain 21+1 operands; and 

combining the operands to obtain an updated intermediate 
result for an iteration step following the previous 
iteration step, an iteration being continued for such time 
until all digits of the multiplier have been processed, 
therein the updated intermediate result, once all digits of 
the multiplier have been processed, is a result of the 
modular exponentiation within the framework of the 
cryptographic application. 

2. The method as claimed in claim 1, wherein 
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the step of determining 1 multiplication shift values 
further includes determining 1 multiplication-lookahead 
parameters; 

5 the step of determining 1 reduction shift values further 
includes determining 1 reduction-lookahead parameters; and 

the step of applying includes using the 1 multiplication- 
lookahead parameters and the 1 reduction-lookahead 
10 parameters to obtain the 21+1 operands. 

3. The method as claimed in claim 1, wherein the step of 
determining the 1 reduction shift values includes 
performing the following substeps: 

15 

determining an auxiliary shift value from an intermediate 
result and from a modulus value for a preceding iteration 
step; 

20 forming a difference from the multiplication shift value 
for a first number of digits of the multiplier, and the 
auxiliary shift value so as to obtain a reduction shift 
value - 

25 4. The method as claimed in claim 3, wherein the step of 

determining 1 reduction shift values further includes the 
following substeps: 

calculating an auxiliary intermediate result using the 
30 intermediate result for the preceding iteration step, 
calculating the first multiplication shift value, the 
modulus and the reduction shift value, however without 
taking into account the multiplicand; 

35 calculating an auxiliary modulus by shifting the modulus or 
the value derived from the modulus by a number of digits 
equaling the reduction shift value; 
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calculating a further auxiliary shift value from the 
auxiliary intermediate result and the auxiliary modulus; 
and 

forming a difference from the second multiplication shift 
value and the second auxiliary shift value so as to obtain 
the second reduction shift value. 

5. The method as claimed in claim 1, 

wherein prior to the step of determining 1 multiplication 
shift values, and prior to the step of determining 1 
reduction shift values, the following step is performed: 

transforming the modulus to a transformed modulus larger 
than the modulus, a predetermined fraction (2/3) of the 
transformed modulus having a more significant digit having 
a first predetermined value, which digit is followed by a 
less significant digit having a second predetermined value; 

and wherein the following step is performed once all digits 
of the multiplier have been processed: 

transforming the updated intermediate result back by 
modular reduction of the updated intermediate result using 
the modulus, 

the steps of determining, of applying and of combining 
being performed on the basis of the transformed modulus. 

6. The method as claimed in claim 5, wherein the step of 
determining 1 reduction shift values includes a substep of 
determining a multiplication intermediate result and a 
reduction shift value, the reduction shift value being 
calculated using a determination of the number of digits 
between the more significant digit having the first 
pj^edeterroined value of the transformed modulus, and the 
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most significant digit of the intermediate result having 
the first predetermined value. 

7. The method as claimed in claim 5/ wherein the 
predetermined fraction of the modulus is 2/3- 

8. The method as claimed in claim 5, wherein the most 
significant bit of the transformed modulus is a sign bit, 
and wherein a more significant portion of the predetermined 
fraction of the modulus is as follows: 

01000 XX . . . XX, 

wherein the bits designated by xx may have any values. 

9. The method as claimed in claim 8, wherein the more 
significant portion of the transformed modulus is as 
follows : 



01100 ... 00 . 

10. The method as claimed in claim 1, 

wherein the modulus is an integer, or wherein the modulus 
is a polynomial of a variable. 

11 . An apparatus for performing a modular multiplication 
on data processing means between a multiplicand and a 
multiplier consisting of a plurality of digits, using a 
modulus, the modular multiplication being part of a modular 
exponentiation within the framework of a cryptographic 
application, and the multiplicand, the multiplier and the 
modulus being variables of the cryptographic application, 
the apparatus comprising: 

means for determining 1 multiplication shift values by 
means of a multiplication-“lookahead method while taking 
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into account 1 blocks of consecutive digits of the 
multiplier, 1 being larger or smaller than 2; 

means for determining 1 reduction shift values by means of 
5 a reduction-lookahead method for the 1 blocks of digits of 
the multiplier; 

means for applying the 1 multiplication shift values and 
the 1 reduction shift values to an intermediate result from 
10 a previous iteration step, to the modulus or to a value 

derived from the modulus, and to the multiplicand so as to 
obtain 21+1 operands; and 

means for combining the operands to obtain an updated 
15 intermediate result for an iteration step following the 

previous iteration step, an iteration being continued for 
such time until all digits of the multiplier have been 
processed, wherein the updated intermediate result, once 
all digits of the multiplier have been processed, is a 
20 result of the modular exponentiation within the framework 
of the cryptographic application. 




